Privacy Policy
This Privacy Policy describes how personal data of users interacting with the Tavola Savorista website (https://tavolasavorista.com) is processed, in accordance with Articles 13 and 14 of the EU Regulation 2016/679 (“GDPR”).
1. Data Controller
The Data Controller is: Giulio Lombardelli
Via Pian delle Noci, 13 – 53045 Montepulciano (SI) – IT
Email: info@tavolasavorista.com
VAT Number: 01629220524
2. Types of Data Collected
a) Data provided voluntarily via forms
Through the WPForms forms available on the website, the following data may be collected:
- first name
- last name
- email address
- message
There is also an optional newsletter subscription field, through which the following data may be collected:
- first name
- last name
- email address
b) Data collected automatically
The website uses necessary technical cookies to ensure proper functionality.
Certain technical data (such as IP address, browser type, and device information) may also be collected automatically during navigation.
c) Anti-spam protection
To protect forms from spam, the website uses Google reCAPTCHA provided by Google LLC, which may collect technical data and the user’s IP address.
More information: https://policies.google.com/privacy
d) External fonts
The website uses Google Fonts (e.g. Sora, Host Grotesk).
When loading fonts, Google may collect technical data.
3. Purpose and Legal Basis of Processing
| Purpose | Legal Basis |
|---|---|
| Responding to contact requests | Art. 6(1)(b) GDPR |
| Managing service or consultation requests | Art. 6(1)(b) GDPR |
| Newsletter subscription (Brevo) | Art. 6(1)(a) GDPR |
| Anti-spam protection | Art. 6(1)(f) GDPR |
| Website technical operation | Art. 6(1)(f) GDPR |
4. Processing Methods
Data is processed using electronic tools and appropriate security measures.
No profiling or automated decision-making processes are carried out.
5. Hosting
The website is hosted by Hostinger International Ltd.
Privacy policy: https://www.hostinger.com/legal/privacy-policy
6. Data Sharing and Disclosure
Personal data may be shared with third parties that process data on behalf of the Data Controller, including:
- Hostinger
- Brevo
- Google LLC
These parties act as data processors or independent controllers, depending on the case.
Sharing refers to transmitting data to third parties for purposes related to service provision (e.g. hosting, email delivery, anti-spam protection), without transferring ownership of the data.
Disclosure (or “data transfer of ownership”) refers to transferring data to third parties who process it as independent controllers for their own purposes.
The website does not disclose personal data to third parties without the user’s explicit consent.
7. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected.
Specifically:
- Contact form data: up to 12 months
- Service requests: up to 24 months
- Newsletter data: until consent is withdrawn
- Technical cookies: session duration or limited time
8. User Rights
Users may exercise their rights under Articles 15–22 GDPR, including:
- access
- rectification
- erasure
- restriction
- objection
- data portability
Requests can be sent to: info@tavolasavorista.com
9. Right to Lodge a Complaint
Users have the right to lodge a complaint with the competent supervisory authority:
Italian Data Protection Authority (Garante per la protezione dei dati personali)
10. Data Transfers Outside the EU
Some services used by the website (Google LLC, Brevo, Hostinger) may involve transfers of personal data outside the European Union.
These transfers are carried out in compliance with GDPR through Standard Contractual Clauses (SCC) or other appropriate safeguards.
11. No User Registration
The website does not provide user account creation or restricted areas.
12. Cookies
The website uses necessary technical cookies and consent management tools via GDPR Cookie Compliance.
For more information, please refer to the Cookie Policy.
13. Newsletter
Newsletter subscription is voluntary.
The service is managed via Brevo (Sendinblue – Privacy: https://www.brevo.com/legal/privacypolicy/).
Users may withdraw their consent at any time through the unsubscribe link included in emails.
14. Unauthorized Use of Content
The use of automated data collection systems (web scraping) without prior authorization is prohibited.
15. Multimedia Content (Photos and Videos)
The website may publish photographic images and/or videos related to services, events, or professional activities.
Such content is used for informational and promotional purposes and is handled in compliance with applicable regulations and, where required, with the prior consent of the individuals involved.
16. Changes to This Policy
This Privacy Policy may be updated over time.
Last updated: 28/04/2026